2256 matches found
proxmox-lxc-docker-fix
Proxmox LXC AppArmor Fix for Docker/Containers Workaround for CVE-2025-52881 : Fixes Docker, Podman, and container runtime breakage in Proxmox LXC containers caused by AppArmor incompatibility with runc 1.2.7+/1.3.2+ 🚨 The Problem Recent security updates to runc versions 1.2.7+ and 1.3.2+ and...
AppArmor.d
apparmor.d Full set of AppArmor profiles !WARNING This project is still in its early development. Help is very welcome; see the documentation website including its development section. Description AppArmor.d is a set of over 1500 AppArmor profiles whose aim is to confine most Linux based...
dirtyfrag-arm64
dirtyfrag-arm64 arm64/aarch64 port of V4bel/dirtyfrag CVE-2026-43284, CVE-2026-43500. Tested on Ubuntu 24.04.4 LTS with linux-aws 6.17.0-1013-aws on AWS Graviton newest available as of this writing. Full writeup with AppArmor bypass analysis, hardening notes, and detection notes:...
codejail
CodeJail CodeJail manages execution of untrusted code in secure sandboxes. It is designed primarily for Python execution, but can be used for other languages as well. Security is enforced with AppArmor. If your operating system doesn't support AppArmor, or if the AppArmor profile is not defined a...
security-baseline-ubuntu
☕ Support the Project If this practical guide has saved your host from compromise, helped you configure your security baseline, or saved you hours of debugging AppArmor and Firejail profiles, you can support the author and further development of this open-source initiative. ⚠️ OPSEC Warning:...
tfo-connect-bypass
Using TCP Fast Open to Bypass Syscall-based Networking Rules CVE-2026-63828/CVE-2026-72243 PoC TCP Fast Open TFO is a method of initializing and using a TCP connection where the client can send data in the initial SYN packet sent to the server. This extension to the TCP protocol was implemented f...
ehir-vuln-enterprise-login
Enterprise Corporate Portal Local Setup This project contains a local containerized setup featuring a frontend portal and an integrated backend gateway. Workspace Structure client/: Contains the static frontend files index.html using Bootstrap 5 and the API connection handler. docker-compose.yml:...
CVE-2026-46331-pedit-COW-detection
CVE-2026-46331 pedit COW – Linux LPE Validation and auditd/AppArmor Detection Defensive validation report for CVE-2026-46331, focused on Linux kernel actpedit, local privilege escalation behavior, auditd telemetry, AppArmor mitigation, and detection logic. Repository description This repository...
CVE-2016-6187_LPE
CVE-2016-6187 - Linux Kernel Exploit Kernel Exploit for CVE-2016-6187 Local Privilege Escalation affected versions: 4.6.5 Exploit was developed against a custom compiled 4.6 kernel + buildroot kconfig coming soon and defeats KASLR, SMEP, SMAP KPTI not available for 4.6 Presentation slides...
Astra Linux – Vulnerability in Linux 5.10
Ubuntu Linux 6.8, 6.17, and 7.0 contain AppArmor patches that incorrectly validate the size of an internal structure, resulting in a out-of-bounds read in the notification handling code. This bug can be triggered by an unprivileged local user, and it can lead to information disclosure from adjace...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: Apparmor: Avoid crashing when parsing a profile name that is empty. When processing a packed profile in unpackprofile, the string “:samba-dcerpcd” is parsed as a fully qualified name and then passed to aasplitnfqname...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: AppArmor: A memory leak was fixed in the verifyheader function. The function sets ns = NULL on every call, causing a memory leak for the namespace string allocated in previous iterations when multiple profiles are unpacked. This...
Astra Linux – Vulnerability in Linux 5.10
Ubuntu Linux 6.8, 6.17, and 7.0 contain AppArmor SAUCE patches that may potentially incorrectly calculate the size of an internal buffer, leading to a heap memory out-of-bounds read in notification handling code. This bug can be triggered by an unprivileged local user, and it can result in invali...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: AppArmor: The recursive approach used for removing profiles has been replaced with an iterative one. The profile removal code uses recursion when removing nested profiles, which can lead to kernel stack exhaustion and system...
CVE-2026-90246
A flaw was found in AppArmor within the Linux kernel. An unprivileged user can exploit an integer overflow vulnerability in the verifytags function by crafting a malicious AppArmor policy. This flaw allows an attacker to trigger an out-of-bounds read during policy loading, which could lead to...
CVE-2026-90231
A flaw was found in AppArmor, a Linux kernel security module. This vulnerability allows a local attacker to bypass security confinement. The issue arises from an incorrect application of unprivileged transition restrictions on tasks already confined by a stack, enabling an escape if two transitio...
CVE-2026-90179
A flaw was found in the Linux kernel's AppArmor security module. When AppArmor is configured in complain mode and a local user attempts to use the changehat function for a non-existent security profile, a deadlock can occur. This happens because both the changehat function and the process of...
ROS-20261013-73-0053
The vulnerability of the apparmor module in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261013-73-0460
The vulnerability of the apparmor/resource.c component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...